Collaborate Disseminate
What is the difference betwen a Trusted Computing Base (TCB) and a Root of Trust (RoT)? Can both terms be used interchangeably?
A TCB is defined by the NIST as follows:
Totality of protection mechanisms within a computer system, including… Continue reading What is the difference betwen a Trusted Computing Base and a Root of Trust?
Is confidential computing/hardware-based trusted execution environment (TEE) the missing security jigsaw puzzle to counter data exfiltration?
Today, we already have data encrypted at rest and data encrypted in transit (TLS) widely adopted…. Continue reading Would confidential computing/hardware-based TEE be the missing security jigsaw puzzle to counter data exfiltration?
what really is the difference between a physical TPM and any implementation of a fTPM? I get that both adhere to the same specification and in my mind should be the same thing, but then, what is the advantage of the physical chip over firm… Continue reading What really is the difference between firmware TPM and a discreet one and should it be trusted more?
On October 2020, the Akamai Technical Enablement and Education (TE&E) Team — responsible for creating product-training certifications for employees (Global Services and Support [GSS]), customers (Akamai University), and channel partners (Advanced Partner Enablement) — won its second industry award for program design, functionality, and impact. Continue reading Akamai’s Technical Enablement and Education Team, Part of the Global Services and Support Organization, Wins 2020 Chief Learning Officer Magazine Gold Award
On October 2020, the Akamai Technical Enablement and Education (TE&E) Team — responsible for creating product-training certifications for employees (Global Services and Support [GSS]), customers (Akamai University), and channel partners (Advanced … Continue reading Akamai’s Technical Enablement and Education Team, Part of the Global Services and Support Organization, Wins 2020 Chief Learning Officer Magazine Gold Award
I am studying Trusted Execution Environment (TEE) in Android mobile phone. From reading, I found there are 2 APIs in TEE (isolated OS):
Internal API: a programming and services API for Trusted Application (TA) in TEE, cannot be called by… Continue reading Trusted Execution Environment (TEE) internal API vs. external (client) API
The newest Android phones use the Qualcomm Snapdragon 855 chipset with its TrustZone/TEE. The Android OS makes sure that a stolen phone, in its assembled form, is not usable.
Does Trustzone further prevent the CPU from bein… Continue reading Anti-Theft Mobile CPU
I am a newbie learning all about isolation and separation for securing applications and system software. In this regard, I was reading up on ARM TEE and how it is available on most Android phones to offer better security for … Continue reading Trusted Execution Environment Vs. Hypervisor or VMs: How are they related?
main question is in the title. Some clarification though:
When you factory reset your encrypted phone, the old device encryption key (DEK a) gets deleted and a new encryption key (DEK b) is being generated, which is used to … Continue reading Is it possible decrypt Android 8 encryption, if the device encryption key is gone (but with a known PIN and KEK)?
An answer (Data deleted after encryption – recoverable?) came to conclusions, which triggered some questions for me.
Link to the paper: https://www.cl.cam.ac.uk/~rja14/Papers/fr_most15.pdf
Cambridge University researcher… Continue reading Cambridge University paper on Android factory reset still up to date?